https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:25:16.958985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10832 bdu:2025-10832 2026-10-03T04:25:17.066368+00:00 bdu:2025-10832 https://cve.radiocsirt.org/vuln/bell-cve-2025-8283 BELL-CVE-2025-8283 2026-10-03T04:25:17.066405+00:00

Affected: Alpaquita:25: netavark, Alpaquita:stream: netavark

 https://cve.radiocsirt.org/vuln/euvd-2026-362304 EUVD-2026-362304 2026-10-03T04:25:17.066433+00:00 EUVD-2026-362304 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8283 fkie_cve-2025-8283 2026-10-03T04:25:17.066446+00:00

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.

 https://cve.radiocsirt.org/vuln/ghsa-rpcf-rmh6-42xr GHSA-rpcf-rmh6-42xr — Netavark Has Possible DNS Resolve Confusion 2026-10-03T04:25:17.066474+00:00

Affected: crates.io: netavark

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-8283 msrc_CVE-2025-8283 — Netavark: podman: netavark may resolve hostnames to unexpected hosts 2026-10-03T04:25:17.066498+00:00 msrc_CVE-2025-8283 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-8283 UBUNTU-CVE-2025-8283 2026-10-03T04:25:17.066515+00:00

Affected: Ubuntu:24.04:LTS: netavark, Ubuntu:25.10: netavark, Ubuntu:26.04:LTS: netavark

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be used as the hostname for the container itself, as the podman's search domain is not added anymore the container is using the host's resolv.conf, and the DNS resolver will try to look into the search domains contained on it. If one of the domains contain a name with the same hostname as the running container, the connection will forward to unexpected external servers.