CVE-2024-45436
HIGHOllama < 0.1.47 - Path Traversal via ZIP Archive Extraction
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-45436. PoCs published by pankass, srcx404.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-45436, targeting Ollama. The exploit leverages a path traversal vulnerability to write a malicious shared object file to `/etc/ld.so.preload`, achieving remote code execution (RCE) when the target process loads the library.
Description
extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.
Exploits (2)
This repository contains a functional exploit for CVE-2024-45436, targeting Ollama. The exploit leverages a path traversal vulnerability to write a malicious shared object file to `/etc/ld.so.preload`, achieving remote code execution (RCE) when the target process loads the library.
This repository contains a functional exploit for CVE-2024-45436, a path traversal vulnerability in Ollama versions prior to 0.1.47. The exploit leverages ZIP file extraction flaws to achieve remote code execution by writing malicious shared objects to critical system paths.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N