Improper Certificate Validation in Podman - CVE-2025-6032

Vulnerability identifier: #VU111945

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2025-6032

CWE-ID: CWE-295

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to podman machine init command fails to verify the TLS certificate when downloading the VM images from an OCI registry. A remote attacker can perform MitM attack. 

Podman
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Containers Module
openSUSE Leap
openEuler
Fedora
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
toolbox
toolbox-tests
udica
runc
slirp4netns
oci-seccomp-bpf-hook
containernetworking-plugins (Red Hat package)
containernetworking-plugins
aardvark-dns
netavark
fuse-overlayfs
crun
skopeo
skopeo-tests
skopeo (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah
buildah-tests
containers-common
conmon
container-selinux
crit
criu-libs
criu-devel
criu
python3-criu
libslirp-devel
libslirp
python3-podman
podman (Red Hat package)
podman-remote
podman-plugins
podman-gvproxy
podman-debugsource
podman-debuginfo
podman
podman-tests
podmansh
podman-docker
podman-help
podman-catatonit
podman-remote-debuginfo
openshift (Red Hat package)
ose-gcp-gcr-image-credential-provider (Red Hat package)
openshift-clients (Red Hat package)
openshift-ansible (Red Hat package)
ose-aws-ecr-image-credential-provider (Red Hat package)
ose-azure-acr-image-credential-provider (Red Hat package)
openshift4-aws-iso (Red Hat package)
kernel (Red Hat package)
cockpit-podman
Red Hat OpenShift Container Platform

Install updates from vendor's website.

IBM Qradar SIEM - update to 7.5.0 Update Pack 13 IF02
toolbox - update to 0.0.99.5-2.0.1
toolbox-tests - update to 0.0.99.5-2.0.1
udica - update to 0.2.6-21
runc - update to 1.1.12-6.0.1
slirp4netns - update to 1.2.3-1
oci-seccomp-bpf-hook - update to 1.2.10-1
containernetworking-plugins (Red Hat package) - update to 1.4.0-5.rhaos4.17.el8
containernetworking-plugins - update to 1.4.0-6.0.1
aardvark-dns - update to 1.10.1-2.0.1
netavark - update to 1.10.3-1.0.1
fuse-overlayfs - update to 1.13-1.0.1
crun - update to 1.14.3-2
skopeo - update to 1.14.5-4.0.1
skopeo-tests - update to 1.14.5-4.0.1
skopeo (Red Hat package) - addressed in versions 1.16.1-2.rhaos4.17.el8, 1.16.1-2.rhaos4.17.el9
cri-tools (Red Hat package) - addressed in versions 1.30.0-6.el8, 1.30.0-6.el9
cri-o (Red Hat package) - addressed in versions 1.30.14-3.rhaos4.17.git0a197ae.el8, 1.30.14-3.rhaos4.17.git0a197ae.el9, 1.31.9-3.rhaos4.18.git0f69ddd.el8, 1.31.9-3.rhaos4.18.git0f69ddd.el9, 1.32.5-4.rhaos4.19.git68174b3.el9
buildah - update to 1.33.12-2
buildah-tests - update to 1.33.12-2
containers-common - update to 1-82.0.1
conmon - update to 2.1.10-1
container-selinux - update to 2.229.0-2
crit - update to 3.18-5.0.1
criu-libs - update to 3.18-5.0.1
criu-devel - update to 3.18-5.0.1
criu - update to 3.18-5.0.1
python3-criu - update to 3.18-5.0.1
libslirp-devel - update to 4.4.0-2
libslirp - update to 4.4.0-2
python3-podman - update to 4.9.0-3
podman (Red Hat package) - addressed in versions 4.9.4-14.rhaos4.16.el8, 4.9.4-16.rhaos4.16.el9, 4.9.4-18.el9_4.2, 5.2.2-8.rhaos4.17.el8, 5.2.2-8.rhaos4.17.el9, 5.2.2-9.rhaos4.18.el9, 5.4.0-6.rhaos4.19.el9, 5.4.0-12.el9_6, 5.4.0-12.el10_0
podman-remote - update to 4.9.4-19
podman-plugins - update to 4.9.4-19
podman-gvproxy - update to 4.9.4-19
podman-debugsource - update to 4.9.4-19
podman-debuginfo - update to 4.9.4-19
podman - update to 4.9.4-19
podman-tests - update to 4.9.4-19
podmansh - update to 4.9.4-19
podman-docker - update to 4.9.4-19
podman-help - update to 4.9.4-19
podman-tests - update to 4.9.4-22.0.1
podman-plugins - update to 4.9.4-22.0.1
podman-docker - update to 4.9.4-22.0.1
podman - update to 4.9.4-22.0.1
podman-catatonit - update to 4.9.4-22.0.1
podman-gvproxy - update to 4.9.4-22.0.1
podman-remote - update to 4.9.4-22.0.1
podman - addressed in versions 4.9.5-150300.9.52.1, 4.9.5-150400.4.50.1, 4.9.5-150500.3.46.1
podman-remote-debuginfo - addressed in versions 4.9.5-150300.9.52.1, 4.9.5-150400.4.50.1, 4.9.5-150500.3.46.1
podmansh - addressed in versions 4.9.5-150300.9.52.1, 4.9.5-150400.4.50.1, 4.9.5-150500.3.46.1
podman-debuginfo - addressed in versions 4.9.5-150300.9.52.1, 4.9.5-150400.4.50.1, 4.9.5-150500.3.46.1
podman-remote - addressed in versions 4.9.5-150300.9.52.1, 4.9.5-150400.4.50.1, 4.9.5-150500.3.46.1
podman-docker - addressed in versions 4.9.5-150300.9.52.1, 4.9.5-150400.4.50.1, 4.9.5-150500.3.46.1
openshift (Red Hat package) - addressed in versions 4.16.0-202506251307.p0.g29b5494.assembly.stream.el8, 4.16.0-202506251307.p0.g29b5494.assembly.stream.el9, 4.17.0-202507011904.p0.ga5f4f89.assembly.stream.el8, 4.17.0-202507011904.p0.ga5f4f89.assembly.stream.el9, 4.18.0-202506201603.p0.g84b31a3.assembly.stream.el8, 4.18.0-202506201603.p0.g84b31a3.assembly.stream.el9
Red Hat OpenShift Container Platform - addressed in versions 4.16.43, 4.16.44, 4.16.45, 4.17.35, 4.17.36, 4.18.19, 4.18.21, 4.19.2, 4.19.5, 4.20.0
ose-gcp-gcr-image-credential-provider (Red Hat package) - addressed in versions 4.17.0-202507011904.p0.g8ce997d.assembly.stream.el8, 4.17.0-202507011904.p0.g8ce997d.assembly.stream.el9
openshift-clients (Red Hat package) - addressed in versions 4.17.0-202507011904.p0.gf39295c.assembly.stream.el8, 4.17.0-202507011904.p0.gf39295c.assembly.stream.el9, 4.18.0-202506241202.p0.g04e91ac.assembly.stream.el8, 4.18.0-202506241202.p0.g04e91ac.assembly.stream.el9
openshift-ansible (Red Hat package) - addressed in versions 4.17.0-202507011904.p0.gde5283f.assembly.stream.el8, 4.17.0-202507011904.p0.gde5283f.assembly.stream.el9
ose-aws-ecr-image-credential-provider (Red Hat package) - addressed in versions 4.17.0-202507011904.p0.g144bace.assembly.stream.el8, 4.17.0-202507011904.p0.g144bace.assembly.stream.el9
ose-azure-acr-image-credential-provider (Red Hat package) - addressed in versions 4.17.0-202507011904.p0.g626ecd1.assembly.stream.el8, 4.17.0-202507011904.p0.g626ecd1.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - update to 4.17.0-202507011904.p0.gd2acdd5.assembly.stream.el8
podman - addressed in versions 5.5.2-1.fc41, 5.5.2-1.fc42, 5.5.2-1.fc43
kernel (Red Hat package) - addressed in versions 5.14.0-427.76.1.el9_4, 5.14.0-570.24.1.el9_6
cockpit-podman - update to 84.1-1

• https://access.redhat.com/security/cve/CVE-2025-6032
• https://bugzilla.redhat.com/show_bug.cgi?id=2372501
• https://github.com/containers/podman/security/advisories/GHSA-65gg-3w2w-hr4h
• https://github.com/podman-container-tools/podman/security/advisories/GHSA-65gg-3w2w-hr4h

• MitM attack in Podman
• Fedora 41 update for podman
• Fedora 43 update for podman
• Fedora 42 update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Improper Certificate Validation in Red Hat OpenShift Container Platform 4.19 packages
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Improper Certificate Validation in Red Hat OpenShift Container Platform 4.18 packages
• Improper Certificate Validation in Red Hat OpenShift Container Platform 4.16 packages
• Red Hat Enterprise Linux 9 update for podman
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17 packages
• Red Hat Enterprise Linux 10 update for podman
• Red Hat Enterprise Linux 9 update for podman
• Red Hat Enterprise Linux 8 update for the container-tools:rhel8 module
• Anolis OS update for container-tools:an8 module
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• SUSE update for podman
• SUSE update for podman
• SUSE update for podman
• SUSE update for podman
• SUSE update for podman
• SUSE update for podman
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.20
• openEuler 24.03 LTS SP1 update for podman