The version of Ollama installed on the remote host is prior to 0.1.34. It is, therefore, affected by a denial-of-service vulnerability:

  - An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until     completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing     the goroutine to run infinitely (even after the HTTP request is aborted by the client). 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ollama < 0.1.34 DoS

high Nessus Plugin ID 210501

Version 1.1