CVE-2024-37032 PoC — Ollama 安全漏洞

Source

https://github.com/ahboon/CVE-2024-37032-scanner

Associated Vulnerability

Title: Ollama 安全漏洞 (CVE-2024-37032)
Description:Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring.

Description

CVE-2024-37032 scanner

Readme

# CVE-2024-37032 Scanner

Scan an entire subnet for vulnerable version of Ollama. If single hose, using X.X.X.X/32

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →