PT-2025-31142 · Netavark+2 · Netavark+2

Johannes Kasberger · Published 2025-07-28 · Updated 2026-05-26 · CVE-2025-8283

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions netavark (affected versions not specified)

Description A vulnerability exists in the netavark package, a network stack for containers used with Podman. Due to the removal of the dns.podman search domain, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name is used as the hostname for the container. Because the Podman search domain is no longer added, the container uses the host's resolv.conf, and the DNS resolver searches the domains contained within it. If one of these domains contains a name matching the running container's hostname, the connection may be forwarded to unexpected external servers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-15

Related Identifiers

BDU:2025-10832

CVE-2025-8283

GHSA-RPCF-RMH6-42XR

Affected Products

Podman

Red Os

Netavark

References · 28

• https://access.redhat.com/security/cve/CVE-2025-8283 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-8283 · Security Note
• https://osv.dev/vulnerability/GHSA-rpcf-rmh6-42xr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8283 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2025-8283 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8283 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10832 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-8283 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-8283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8283 · Vendor Advisory
• https://github.com/containers/podman/issues/2619 · Note
• https://github.com/containers/podman/issues/26198 · Note
• https://github.com/containers/netavark/releases/tag/v1.15.1 · Note
• https://github.com/containers/netavark/pull/1256/commits/03f12695a696c7fe407eefebd7d5ad3cf2e934fe · Note
• https://github.com/containers/netavark/pull/1256 · Note