x/vulndb: potential Go vuln in k8s.io/minikube: GHSA-6pcv-qqx4-mxm3

[GoVulnBot]

In GitHub Security Advisory GHSA-6pcv-qqx4-mxm3, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
k8s.io/minikube		>= 0.3.0, <= 0.29.0

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: k8s.io/minikube
      versions:
        - introduced: TODO (earliest fixed "", vuln range ">= 0.3.0, <= 0.29.0")
      vulnerable_at: 1.31.1
      packages:
        - package: k8s.io/minikube
summary: Minikube RCE via DNS Rebinding
description: |-
    In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard
    listening on the VM IP at port 30000. In VM environments where the IP is easy to
    predict, the attacker can use DNS rebinding to indirectly make requests to the
    Kubernetes Dashboard, create a new Kubernetes Deployment running arbitrary code.
    If minikube mount is in use, the attacker could also directly access the host
    filesystem.
cves:
    - CVE-2018-1002103
ghsas:
    - GHSA-6pcv-qqx4-mxm3
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2018-1002103
    - report: https://github.com/kubernetes/minikube/issues/3208
    - advisory: https://github.com/advisories/GHSA-6pcv-qqx4-mxm3

[gopherbot]

Change https://go.dev/cl/514636 mentions this issue: data/excluded: batch add 31 excluded reports

[gopherbot]

Change https://go.dev/cl/592762 mentions this issue: data/reports: unexclude 75 reports

[gopherbot]

Change https://go.dev/cl/606789 mentions this issue: data/reports: unexclude 20 reports (9)