REDHAT-BUG-2383941: Low severity Red Hat Podman vulnerability
Netavark was recently changed, when being used with podman, to remove the dns.podman search domain in detriment of using the host's search domain in the container. This leads to a possible DNS resolve confusion in some scenarios where the container created using podman have the same hostname as an external service. This may lead to containers communicating to unexpected servers instead of the desired one.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2383941?
The severity of REDHAT-BUG-2383941 is currently categorized as moderate due to potential DNS resolution issues.
How do I fix REDHAT-BUG-2383941?
To mitigate REDHAT-BUG-2383941, ensure that your podman containers do not use hostnames conflicting with the container's hostname.
What are the potential risks associated with REDHAT-BUG-2383941?
The risks include DNS resolution confusion that may lead to misrouting network traffic within containers.
Which software versions are affected by REDHAT-BUG-2383941?
REDHAT-BUG-2383941 affects Red Hat Podman and Netavark across multiple versions.
Is there a workaround for REDHAT-BUG-2383941?
A possible workaround for REDHAT-BUG-2383941 is to configure a unique hostname for each container to avoid DNS conflicts.