CVE-2025-8283

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-8283
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8283.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-8283
Aliases
Downstream
Published
2025-07-28T18:16:07.853Z
Modified
2026-08-23T03:42:41.880067657Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Netavark: podman: netavark may resolve hostnames to unexpected hosts
Details

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.

Database specific 
{
    "cwe_ids": [
        "CWE-15"
    ],
    "cna_assigner": "redhat",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8283.json"
}
References

Affected packages

Git / github.com/containers/netavark

Affected ranges

Type
GIT
Repo
https://github.com/containers/netavark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
868d33d321fc9f57d0bd2ddf14bb566078a32da4
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.15.1"
        }
    ]
}
Type
GIT
Repo
https://github.com/podman-container-tools/podman
Events
Introduced
84c8870ac236578c41713113fc09a29a5f727bdd
Last affected
84c8870ac236578c41713113fc09a29a5f727bdd
Database specific
Show details 
{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0"
        },
        {
            "last_affected": "4.0"
        }
    ]
}

Affected versions

4.*
4.0
v1.*
v1.15.0
v4.*
v4.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8283.json"