CVE-2024-7773

ollama: Remote Code Execution via ZipSlip in ollama/ollama

View on CVE.org
Published Mar 20, 2025 CVSS 3.0 · 9.1 Critical EPSS n/a KEV · Not listed
Description
** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45436. Notes: All CVE users should reference CVE-2024-45436 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-6940 ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45436. Notes: All CVE users should reference CVE-2024-45436 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
History
Type Values Removed Values Added
Metrics threat_severity

Critical

 threat_severity

None
Type Values Removed Values Added
Title Remote Code Execution via ZipSlip in ollama/ollama ollama: Remote Code Execution via ZipSlip in ollama/ollama
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
CPEs cpe:2.3:a:ollama:ollama:0.1.37:*:*:*:*:*:*:*
Vendors & Products Ollama
Ollama ollama
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}
Type Values Removed Values Added
Description A vulnerability in ollama/ollama version 0.1.37 allows for remote code execution (RCE) due to improper input validation in the handling of zip files. The vulnerability, known as ZipSlip, occurs in the parseFromZipFile function in server/model.go. The code does not check for directory traversal sequences (../) in file names within the zip archive, allowing an attacker to write arbitrary files to the file system. This can be exploited to create files such as /etc/ld.so.preload and a malicious shared library, leading to RCE. ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-45436. Notes: All CVE users should reference CVE-2024-45436 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage.
Type Values Removed Values Added
First Time appeared Ollama
Ollama ollama
CPEs cpe:2.3:a:ollama:ollama:0.1.37:*:*:*:*:*:*:*
Vendors & Products Ollama
Ollama ollama
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}
Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Critical
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability in ollama/ollama version 0.1.37 allows for remote code execution (RCE) due to improper input validation in the handling of zip files. The vulnerability, known as ZipSlip, occurs in the parseFromZipFile function in server/model.go. The code does not check for directory traversal sequences (../) in file names within the zip archive, allowing an attacker to write arbitrary files to the file system. This can be exploited to create files such as /etc/ld.so.preload and a malicious shared library, leading to RCE.
Title Remote Code Execution via ZipSlip in ollama/ollama
Weaknesses CWE-20
References
Metrics cvssV3_0

{'score': 9.1, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H'}
Earlier changes (3)
Weaknesses

Sources

Status
REJECTED
Assigner
@huntr_ai
Published
Updated
Apr 15, 2025, 3:49 PM
Reserved
Aug 13, 2024, 8:28 PM

View source JSON

Updated

JSON

Status
Rejected
Published
Mar 20, 2025, 10:15 AM
Modified
Apr 15, 2025, 4:15 PM

View source JSON

Severity
Public date
Mar 20, 2025, 10:09 AM

View source Bugzilla JSON

No data.