CVE-2024-37032: Ollama digest format validation flaw

# CVE-2024-37032: Ollama digest format validation flaw

https://gcdradar.vercel.app/incidents/cve-2024-37032-ollama-digest-format-validation-flaw · AIR-2024-0112 · closed 2024-05-31

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2024-05-31
- AI role: Attack on AI
- Products: Ollama
- CVE ids: CVE-2024-37032
- CVSS: 8.8

## Summary

Ollama before version 0.1.34 fails to properly validate model digest formats, potentially allowing path traversal attacks via crafted identifiers. The issue has been addressed in subsequent updates.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-05-31: CVE-2024-37032: Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus… (https://nvd.nist.gov/vuln/detail/CVE-2024-37032)
- 2024-05-31: CVE-2024-37032: Ollama does not validate the format of the digest (sha256 with 64 hex digits) (https://github.com/advisories/GHSA-8hqg-whrw-pv92)

## Sources

- 2024-05-31 GitHub Advisory Database: CVE-2024-37032: Ollama does not validate the format of the digest (sha256 with 64 hex digits) https://github.com/advisories/GHSA-8hqg-whrw-pv92
- 2024-05-31 NVD: CVE-2024-37032: Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus… https://nvd.nist.gov/vuln/detail/CVE-2024-37032

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.