CVE-2025-8283: redhat enterprise_linux
Vulnerability summary
CVE-2025-8283 is a low (CVSS 3.7) vulnerability in redhat enterprise_linux. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 25.9% of scored vulnerabilities.
Timeline
- 28-07-2025PublishedVulnerability first disclosed.
- 01-09-2026Last modifiedVulnerability information updated.
Description
A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated3.7LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- OSV · Crates.ioEcosystem advisory · calculated3.7LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- NVDNIST3.7LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
+0.03 pp
From 0.31% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat2 products
- enterprise_linux8.0 | 9.0 | 10.0
- openshift_container_platform4.0
Crates.Io1 product
- netavark< 1.15.1
Ubuntu1 product
- netavarkAll versions (No fix recorded)
3 vendors · 4 products
