Nixpkgs security tracker
7.5 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.
References
Affected products
- ==v0.13.5
Matching in nixpkgs
pkgs.ollama
Get up and running with large language models locally
pkgs.gollama
Go manage your Ollama models
pkgs.ollama-cpu
Get up and running with large language models locally
pkgs.ollama-cuda
Get up and running with large language models locally, using CUDA for NVIDIA GPU acceleration
pkgs.ollama-rocm
Get up and running with large language models locally, using ROCm for AMD GPU acceleration
pkgs.ollama-vulkan
Get up and running with large language models locally, using Vulkan for generic GPU acceleration
pkgs.pkgsRocm.ollama
Get up and running with large language models locally, using ROCm for AMD GPU acceleration
pkgs.nextjs-ollama-llm-ui
Simple chat web interface for Ollama LLMs
pkgs.python312Packages.ollama
None
pkgs.python313Packages.ollama
Ollama Python library
pkgs.python314Packages.ollama
Ollama Python library
pkgs.python312Packages.llm-ollama
None
pkgs.python313Packages.llm-ollama
LLM plugin providing access to Ollama models using HTTP API
pkgs.python314Packages.llm-ollama
LLM plugin providing access to Ollama models using HTTP API
pkgs.haskellPackages.ollama-haskell
Haskell client for ollama
pkgs.gnomeExtensions.ollama-indicator
An indicator that let you run models with Ollama.
pkgs.python312Packages.langchain-ollama
None
pkgs.python313Packages.langchain-ollama
Integration package connecting Ollama and LangChain
pkgs.python314Packages.langchain-ollama
Integration package connecting Ollama and LangChain
pkgs.home-assistant-component-tests.ollama
None
pkgs.python313Packages.llama-index-llms-ollama
LlamaIndex LLMS Integration for ollama
Package maintainers
-
@honnip Jung seungwoo <me@honnip.page>
-
@genga898 Emmanuel Genga <genga898@gmail.com>
-
@malteneuss Malte Neuss
-
@prusnak Pavol Rusnak <pavol@rusnak.io>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@sarahec Sarah Clark <seclark@nextquestion.net>
-
@Erethon Dionysis Grigoropoulos <dgrig@erethon.com>