Red Hat Enterprise Linux/OpenShift Container Platform netavark external control of setting

Summaryinfo

A vulnerability, which was classified as problematic, was found in Red Hat Enterprise Linux and OpenShift Container Platform. Affected by this issue is some unknown functionality of the component netavark. Executing a manipulation can lead to external control of setting. This vulnerability is handled as CVE-2025-8283. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability has been found in Red Hat Enterprise Linux and OpenShift Container Platform (affected version not known) and classified as problematic. This vulnerability affects some unknown functionality of the component netavark. The manipulation with an unknown input leads to a external control of setting vulnerability. The CWE definition for the vulnerability is CWE-15. One or more system settings or configuration elements can be externally controlled by a user. As an impact it is known to affect confidentiality. CVE summarizes:

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.

The advisory is shared for download at access.redhat.com. This vulnerability was named CVE-2025-8283 since 07/28/2025. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 11/13/2025).

The vulnerability scanner Nessus provides a plugin with the ID 271790 (TencentOS Server 4: netavark (TSSA-2025:0782)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (271790) and EUVD (EUVD-2025-22934). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Enterprise Linux
• OpenShift Container Platform

License

• commercial

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion