Ollama DNS Rebinding Vulnerability Allows API Access

# Ollama DNS Rebinding Vulnerability Allows API Access

https://gcdradar.vercel.app/incidents/ollama-dns-rebinding-vulnerability-allows-api-access · AIR-2024-0082 · closed 2024-04-08

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2024-04-08
- AI role: Attack on AI
- Products: Ollama
- CVE ids: CVE-2024-28224
- CVSS: 8.8

## Summary

Ollama contains a DNS rebinding vulnerability that enables unauthorized remote access to the full API. This flaw allows attackers to interact with models, delete them, or trigger resource exhaustion.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-04-08: CVE-2024-28224: Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby… (https://nvd.nist.gov/vuln/detail/CVE-2024-28224)
- 2024-04-08: CVE-2024-28224: Ollama DNS rebinding vulnerability (https://github.com/advisories/GHSA-5jx5-hqx5-2vrj)

## Sources

- 2024-04-08 GitHub Advisory Database: CVE-2024-28224: Ollama DNS rebinding vulnerability https://github.com/advisories/GHSA-5jx5-hqx5-2vrj
- 2024-04-08 NVD: CVE-2024-28224: Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby… https://nvd.nist.gov/vuln/detail/CVE-2024-28224

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.