Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely (even after the HTTP request is aborted by the client).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ollama 安全漏洞
Vulnerability Description
Ollama是Ollama开源的一个可以在本地启动并运行的大型语言模型。 Ollama 0.1.34之前版本存在安全漏洞，该漏洞源于CreateModelHandler函数使用os.Open读取文件时，req.Path参数可由用户控制，可能导致goroutine无限运行。
CVSS Information
N/A
Vulnerability Type
N/A