Local Privilege Escalation Vulnerability in NixOS Docker Socket

CVE-2017-7412

What is CVE-2017-7412?

The vulnerability affects NixOS 17.03 prior to version 17.03.887 due to a misconfigured Docker socket that is world-writable. This misconfiguration permits local users to execute Docker commands, potentially enabling them to elevate their privileges and gain unauthorized access to the system. The issue is significant as it undermines the security model of Docker and exposes the host system to local threats. For mitigation, users are advised to update to the latest version of NixOS or configure the Docker socket with the appropriate access controls.

References