CVE-2025-6032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-6032
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-6032.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-6032
Aliases
Downstream
AZL (1)
CGA (10)
DEBIAN (1)
MINI (1)
OESA (1)
openSUSE (4)
RHSA (8)
RLSA (3)
SUSE (10)
UBUNTU (1)
Related
ALSA (3)
openSUSE (4)
SUSE (10)
Published
2025-06-24T13:50:47Z
Modified
2026-10-22T10:31:55Z
Severity
  • 8.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Podman: podman missing tls verification
Details

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. This issue results in a Man In The Middle attack.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-295"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6032.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "6:5.4.0-12.el10_0"
                        },
                        {
                            "fixed": "8100020250625105344.afee755d"
                        },
                        {
                            "fixed": "5:5.4.0-12.el9_6"
                        },
                        {
                            "fixed": "4:4.9.4-18.el9_4.2"
                        },
                        {
                            "fixed": "4:4.9.4-14.rhaos4.16.el8"
                        },
                        {
                            "fixed": "416.94.202507222002-0"
                        },
                        {
                            "fixed": "5:5.2.2-8.rhaos4.17.el8"
                        },
                        {
                            "fixed": "417.94.202507132309-0"
                        },
                        {
                            "fixed": "418.94.202507221927-0"
                        },
                        {
                            "fixed": "5:5.2.2-9.rhaos4.18.el9"
                        },
                        {
                            "fixed": "4.19.9.6.202507152218-0"
                        },
                        {
                            "fixed": "5:5.4.0-6.rhaos4.19.el9"
                        },
                        {
                            "fixed": "4.20.9.6.202509251656-0"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/podman-container-tools/podman

Affected ranges

Type
GIT
Repo
https://github.com/podman-container-tools/podman
Events
Introduced
c4dfcf14874479e34b3f312f089fc5840e306258
Fixed
e7d8226745ba07a64b7176a7f128e4ef53225a0e
Fixed
726b506acc8a00d99f1a3a1357ecf619a1f798c3
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "4.8.0"
                },
                {
                    "fixed": "5.5.2"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "fixed": "726b506acc8a00d99f1a3a1357ecf619a1f798c3"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-6032.json"