CVE-2025-8283

LOW EPSS 20.7%
Published Jul 28, 202511mo ago · Modified Jun 17, 20261w ago
3.7 CVSS 3.1
Low
Find Similar
Published Jul 28, 2025 11mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.

CVSS Details

Base Score
3.7
Exploitability
2.2
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
20.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-15

Affected Products 4

VendorProductVersionRange
redhatopenshift_container_platform4.0any
redhatenterprise_linux8.0any
redhatenterprise_linux9.0any
redhatenterprise_linux10.0any

References 5

  • access.redhat.com https://access.redhat.com/security/cve/CVE-2025-8283
    Vendor Advisory
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2383941
    Issue Tracking
  • github.com https://github.com/advisories/GHSA-rpcf-rmh6-42xr
  • github.com https://github.com/containers/netavark/releases/tag/v1.15.1
  • github.com https://github.com/containers/podman/issues/2619

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.