cve/2024/CVE-2024-45436.md

CVE-2024-45436

Description

extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.

POC

Reference

No PoCs from references.

Github

• https://github.com/XiaomingX/cve-2024-45436-exp
• https://github.com/XiaomingX/weekly
• https://github.com/badboy0/Ollama_Exploit_Tool
• https://github.com/dansarmiento/ollama_sql_runner
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/pankass/CVE-2024-37032_CVE-2024-45436
• https://github.com/plzheheplztrying/cve_monitor
• https://github.com/srcx404/CVE-2024-45436
• https://github.com/wowtalon/LLM-Security