{"id":47953,"date":"2026-05-09T15:57:06","date_gmt":"2026-05-09T08:57:06","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47953"},"modified":"2026-05-29T15:57:56","modified_gmt":"2026-05-29T08:57:56","slug":"bleeding-llama-lo-hong-ro-ri-bo-nho-de-doa-300-000-may-chu-ollama-toan-cau","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/bleeding-llama-lo-hong-ro-ri-bo-nho-de-doa-300-000-may-chu-ollama-toan-cau\/","title":{"rendered":"Bleeding Llama: L\u1ed7 h\u1ed5ng r\u00f2 r\u1ec9 b\u1ed9 nh\u1edb \u0111e d\u1ecda 300.000 m\u00e1y ch\u1ee7 Ollama to\u00e0n c\u1ea7u"},"content":{"rendered":"
M\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong n\u1ec1n t\u1ea3ng ch\u1ea1y AI c\u1ee5c b\u1ed9 Ollama \u0111ang khi\u1ebfn h\u00e0ng tr\u0103m ngh\u00ecn m\u00e1y ch\u1ee7 \u0111\u1ed1i m\u1eb7t nguy c\u01a1 r\u00f2 r\u1ec9 d\u1eef li\u1ec7u. Ch\u1ec9 v\u1edbi v\u00e0i y\u00eau c\u1ea7u API \u0111\u01a1n gi\u1ea3n, tin t\u1eb7c c\u00f3 th\u1ec3 \u0111\u1ecdc tr\u1ef1c ti\u1ebfp d\u1eef li\u1ec7u trong b\u1ed9 nh\u1edb h\u1ec7 th\u1ed1ng v\u00e0 \u00e2m th\u1ea7m \u0111\u00e1nh c\u1eafp prompt ng\u01b0\u1eddi d\u00f9ng, kh\u00f3a API, bi\u1ebfn m\u00f4i tr\u01b0\u1eddng, d\u1eef li\u1ec7u n\u1ed9i b\u1ed9 doanh nghi\u1ec7p v\u00e0 nhi\u1ec1u th\u00f4ng tin nh\u1ea1y c\u1ea3m kh\u00e1c.<\/b>
\n\u200b<\/div>\n
\n
\"ollama<\/div>\n<\/div>\n
\nL\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c \u0111\u1eb7t t\u00ean \u201cBleeding Llama\u201d v\u1edbi m\u00e3 \u0111\u1ecbnh danh l\u00e0 CVE-2026-7482 (CVSS 9,1), \u1ea3nh h\u01b0\u1edfng t\u1edbi kho\u1ea3ng 300.000 m\u00e1y ch\u1ee7 Ollama tr\u00ean to\u00e0n c\u1ea7u. Theo c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u t\u1ea1i Cyera, \u0111\u00e2y l\u00e0 m\u1ed9t trong nh\u1eefng l\u1ed7i nguy hi\u1ec3m nh\u1ea5t t\u1eebng \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n tr\u00ean h\u1ea1 t\u1ea7ng AI t\u1ef1 l\u01b0u tr\u1eef do kh\u1ea3 n\u0103ng tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u tr\u1ef1c ti\u1ebfp t\u1eeb v\u00f9ng nh\u1edb \u0111ang ho\u1ea1t \u0111\u1ed9ng c\u1ee7a h\u1ec7 th\u1ed1ng.\u200b<\/div>\n

 <\/p>\n

\n
\"1778232184595.png\"<\/div>\n

Ollama \u0111\u0103ng t\u1ea3i c\u00e1c m\u00f4 h\u00ecnh c\u00f3 h\u00ecnh \u1ea3nh b\u1ecb r\u00f2 r\u1ec9 (ngu\u1ed3n: Cyera)<\/i>
\n\u200b<\/div>\n

Theo b\u00e1o c\u00e1o k\u1ef9 thu\u1eadt, l\u1ed7 h\u1ed5ng n\u1eb1m trong quy tr\u00ecnh Ollama x\u1eed l\u00fd c\u00e1c t\u1ec7p GGUF khi kh\u1edfi t\u1ea1o m\u00f4 h\u00ecnh AI m\u1edbi. K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 t\u1ea1o m\u1ed9t t\u1ec7p GGUF \u0111\u1ed9c h\u1ea1i v\u1edbi metadata tensor gi\u1ea3 m\u1ea1o, khai b\u00e1o k\u00edch th\u01b0\u1edbc tensor l\u1edbn h\u01a1n nhi\u1ec1u so v\u1edbi l\u01b0\u1ee3ng d\u1eef li\u1ec7u th\u1ef1c t\u1ebf t\u1ed3n t\u1ea1i trong t\u1ec7p. Khi Ollama ti\u1ebfn h\u00e0nh chuy\u1ec3n \u0111\u1ed5i tensor, h\u1ec7 th\u1ed1ng s\u1ebd b\u1ecb \u0111\u00e1nh l\u1eeba \u0111\u1ec3 \u0111\u1ecdc v\u01b0\u1ee3t ra ngo\u00e0i ph\u1ea1m vi b\u1ed9 nh\u1edb h\u1ee3p l\u1ec7.\u200b<\/div>\n

 <\/p>\n

\n
\"1778232065198.png\"<\/div>\n

K\u1ebb t\u1ea5n c\u00f4ng g\u1eedi tensor GGUF b\u1ecb l\u1ed7i \u0111\u1ecbnh d\u1ea1ng, g\u00e2y ra hi\u1ec7n t\u01b0\u1ee3ng \u0111\u1ecdc v\u01b0\u1ee3t qu\u00e1 dung l\u01b0\u1ee3ng b\u1ed9 nh\u1edb (ngu\u1ed3n: Cyera)<\/i>\u200b<\/div>\n

 <\/p>\n

Nguy\u00ean nh\u00e2n n\u1eb1m \u1edf vi\u1ec7c Ollama s\u1eed d\u1ee5ng c\u00e1c thao t\u00e1c b\u1ed9 nh\u1edb c\u1ea5p th\u1ea5p th\u00f4ng qua c\u01a1 ch\u1ebf unsafe c\u1ee7a Go nh\u01b0ng l\u1ea1i kh\u00f4ng ki\u1ec3m tra ch\u1eb7t ch\u1ebd s\u1ef1 kh\u1edbp \u0111\u00fang gi\u1eefa metadata v\u00e0 k\u00edch th\u01b0\u1edbc d\u1eef li\u1ec7u th\u1ef1c. \u0110i\u1ec1u n\u00e0y khi\u1ebfn h\u1ec7 th\u1ed1ng v\u00f4 t\u00ecnh k\u00e9o theo c\u00e1c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m n\u1eb1m trong v\u00f9ng nh\u1edb l\u00e2n c\u1eadn. \u0110\u00e1ng ch\u00fa \u00fd, k\u1ebb t\u1ea5n c\u00f4ng c\u00f2n c\u00f3 th\u1ec3 b\u1ea3o to\u00e0n g\u1ea7n nh\u01b0 nguy\u00ean v\u1eb9n ph\u1ea7n d\u1eef li\u1ec7u b\u1ecb r\u00f2 r\u1ec9 b\u1eb1ng c\u00e1ch \u00e9p qu\u00e1 tr\u00ecnh chuy\u1ec3n \u0111\u1ed5i t\u1eeb \u0111\u1ecbnh d\u1ea1ng float-16 sang float-32, gi\u00fap c\u00e1c byte b\u1ed9 nh\u1edb \u0111\u00e1nh c\u1eafp kh\u00f4ng b\u1ecb h\u1ecfng trong qu\u00e1 tr\u00ecnh l\u01b0\u1ee3ng t\u1eed h\u00f3a d\u1eef li\u1ec7u.\u200b<\/div>\n

 <\/p>\n

\n
\"1778232211718.png\"<\/div>\n

Vi\u1ec7c \u0111\u1ea3o ng\u01b0\u1ee3c l\u01b0\u1ee3ng t\u1eed h\u00f3a l\u00e0m l\u1ed9 d\u1eef li\u1ec7u v\u00f9ng nh\u1edb heap (ngu\u1ed3n: Cyera)<\/i>
\n\u200b<\/div>\n

Sau khi model ch\u1ee9a d\u1eef li\u1ec7u r\u00f2 r\u1ec9 \u0111\u01b0\u1ee3c t\u1ea1o th\u00e0nh c\u00f4ng, tin t\u1eb7c ch\u1ec9 c\u1ea7n s\u1eed d\u1ee5ng t\u00ednh n\u0103ng \u201cpush\u201d \u0111\u1ec3 \u00e2m th\u1ea7m chuy\u1ec3n model n\u00e0y v\u1ec1 m\u00e1y ch\u1ee7 do ch\u00fang ki\u1ec3m so\u00e1t. To\u00e0n b\u1ed9 th\u00f4ng tin t\u1eebng xu\u1ea5t hi\u1ec7n trong v\u00f9ng nh\u1edb Heap c\u1ee7a h\u1ec7 th\u1ed1ng n\u1ea1n nh\u00e2n khi \u0111\u00f3 c\u00f3 nguy c\u01a1 b\u1ecb l\u1ed9, bao g\u1ed3m l\u1ecbch s\u1eed prompt ng\u01b0\u1eddi d\u00f9ng, system prompt, API key, m\u1eadt kh\u1ea9u c\u01a1 s\u1edf d\u1eef li\u1ec7u v\u00e0 nhi\u1ec1u c\u1ea5u h\u00ecnh n\u1ed9i b\u1ed9 nh\u1ea1y c\u1ea3m c\u1ee7a doanh nghi\u1ec7p.<\/p>\n

L\u1ed7 h\u1ed5ng \u1ea3nh h\u01b0\u1edfng t\u1edbi to\u00e0n b\u1ed9 c\u00e1c phi\u00ean b\u1ea3n Ollama tr\u01b0\u1edbc 0.17.1, bu\u1ed9c ng\u01b0\u1eddi d\u00f9ng v\u00e0 doanh nghi\u1ec7p ph\u1ea3i nhanh ch\u00f3ng tri\u1ec3n khai bi\u1ec7n ph\u00e1p ph\u00f2ng v\u1ec7. C\u00e1c chuy\u00ean gia khuy\u1ebfn ngh\u1ecb c\u1ea7n c\u1eadp nh\u1eadt ngay l\u00ean phi\u00ean b\u1ea3n m\u1edbi \u0111\u1ec3 v\u00e1 l\u1ed7i x\u1eed l\u00fd b\u1ed9 nh\u1edb, \u0111\u1ed3ng th\u1eddi tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng \u0111\u1ec3 d\u1ecbch v\u1ee5 Ollama truy c\u1eadp tr\u1ef1c ti\u1ebfp t\u1eeb Internet m\u00e0 n\u00ean \u0111\u1eb7t sau c\u00e1c l\u1edbp x\u00e1c th\u1ef1c ho\u1eb7c gi\u1edbi h\u1ea1n trong m\u1ea1ng n\u1ed9i b\u1ed9 tin c\u1eady.<\/p>\n

V\u1edbi nh\u1eefng h\u1ec7 th\u1ed1ng t\u1eebng c\u00f4ng khai ra ngo\u00e0i Internet, gi\u1edbi nghi\u00ean c\u1ee9u c\u1ea3nh b\u00e1o c\u1ea7n xem x\u00e9t l\u1ea1i to\u00e0n b\u1ed9 nh\u1eadt k\u00fd truy c\u1eadp, theo d\u00f5i c\u00e1c d\u1ea5u hi\u1ec7u kh\u1edfi t\u1ea1o model b\u1ea5t th\u01b0\u1eddng v\u00e0 thay \u0111\u1ed5i to\u00e0n b\u1ed9 API key, secrets ho\u1eb7c th\u00f4ng tin x\u00e1c th\u1ef1c nh\u1ea1y c\u1ea3m nh\u1eb1m gi\u1ea3m nguy c\u01a1 d\u1eef li\u1ec7u \u0111\u00e3 b\u1ecb \u0111\u00e1nh c\u1eafp tr\u01b0\u1edbc \u0111\u00f3.
\n\u200b<\/p><\/div>\n

T\u1ed5ng h\u1ee3p<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

M\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong n\u1ec1n t\u1ea3ng ch\u1ea1y AI c\u1ee5c b\u1ed9 Ollama \u0111ang khi\u1ebfn h\u00e0ng tr\u0103m ngh\u00ecn m\u00e1y ch\u1ee7 \u0111\u1ed1i m\u1eb7t nguy c\u01a1 r\u00f2 r\u1ec9 d\u1eef li\u1ec7u. Ch\u1ec9 v\u1edbi v\u00e0i y\u00eau c\u1ea7u API \u0111\u01a1n gi\u1ea3n, tin t\u1eb7c c\u00f3 th\u1ec3 \u0111\u1ecdc tr\u1ef1c ti\u1ebfp d\u1eef li\u1ec7u trong b\u1ed9 nh\u1edb h\u1ec7 th\u1ed1ng v\u00e0 […]<\/p>\n","protected":false},"author":20,"featured_media":47954,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47953","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47953"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47953\/revisions"}],"predecessor-version":[{"id":47955,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47953\/revisions\/47955"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47954"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}