CVE-2025-8283
low
CVSS v3
3.7
CVSS v2
—
VIR risk
3.7
Description
Netavark Has Possible DNS Resolve Confusion
Predictions
Exploit likelihood
47%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2025-8283
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2025-8283.html
Vendor advisory: secalert@redhat.com — https://access.redhat.com/security/cve/CVE-2025-8283
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| sles | affected | | |
| debian | bookworm | fixed | 0 |
| debian | forky | fixed | 0 |
| debian | sid | fixed | 0 |
| debian | trixie | fixed | 0 |
| rhel | 8.0 | affected | |
| rhel | 9.0 | affected | |
| rhel | 10.0 | affected | |
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| crates.io | netavark | <1.15.1 | 1.15.1 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| redhat | openshift_container_platform | 4.0 | |
References
- https://access.redhat.com/security/cve/CVE-2025-8283
- https://bugzilla.redhat.com/show_bug.cgi?id=2383941
- https://github.com/advisories/GHSA-rpcf-rmh6-42xr
- https://github.com/containers/netavark/releases/tag/v1.15.1
- https://github.com/containers/podman/issues/2619
- https://www.suse.com/security/cve/CVE-2025-8283.html
- https://security-tracker.debian.org/tracker/CVE-2025-8283
- https://nvd.nist.gov/vuln/detail/CVE-2025-8283
- https://github.com/containers/podman/issues/26198
- https://github.com/containers/netavark/pull/1256
- https://github.com/containers/netavark/commit/068abc869b736a03a947b5419c102da73830e882
- https://github.com/containers/netavark
CWEs
CWE-15
Verify integrity in audit chain (admin only). AS-IS.