LLMMedium
CVE-2024-28224: Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to…
- Occurred
- Apr 8, 2024
- Published
- Apr 8, 2024
- Source
- NVD CVE
Summary
Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).
Tags
- CVE
- CVE-2024-28224
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Vulnerability in Ollama LLM software allowing unauthorized API access and DoS.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8