x/vulndb: add reports/GO-2022-0701.yaml for CVE-2015-5305

Fixes #701

Change-Id: I2fb6d5dbcf97c83bdba802fdbfb1bdc96c036d43
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/422534
Run-TryBot: Zvonimir Pavlinovic <[email protected]>
TryBot-Result: Gopher Robot <[email protected]>
Reviewed-by: Damien Neil <[email protected]>

Author: zpavlinovic

reports/GO-2022-0701.yaml

@@ -0,0 +1,57 @@
+packages:
+  - module: k8s.io/kubernetes
+    package: k8s.io/kubernetes/pkg/api/rest
+    symbols:
+      - BeforeCreate
+    versions:
+      - fixed: 1.1.1
+  - module: k8s.io/kubernetes
+    package: k8s.io/kubernetes/pkg/registry/generic/etcd
+    symbols:
+      - NamespaceKeyFunc
+    versions:
+      - fixed: 1.1.1
+  - module: k8s.io/kubernetes
+    package: k8s.io/kubernetes/pkg/storage
+    symbols:
+      - NamespaceKeyFunc
+      - NoNamespaceKeyFunc
+    versions:
+      - fixed: 1.1.1
+  - module: k8s.io/kubernetes
+    package: k8s.io/kubernetes/pkg/registry/namespace/etcd
+    symbols:
+      - NewREST
+    versions:
+      - fixed: 1.1.1
+  - module: k8s.io/kubernetes
+    package: k8s.io/kubernetes/pkg/registry/node/etcd
+    symbols:
+      - NewREST
+    versions:
+      - fixed: 1.1.1
+  - module: k8s.io/kubernetes
+    package: k8s.io/kubernetes/pkg/registry/persistentvolume/etcd
+    symbols:
+      - NewREST
+    versions:
+      - fixed: 1.1.1
+description: |
+    Crafted object type names can cause directory traversal in Kubernetes.
+
+    Object names are not validated before being passed to etcd. This allows
+    attackers to write arbitrary files via a crafted object name, hence causing
+    directory traversal vulnerability in Kubernetes, as used in Red Hat
+    OpenShift Enterprise 3.0.
+published: 2022-02-15T01:57:18Z
+last_modified: 2022-04-12T22:38:09Z
+cves:
+  - CVE-2015-5305
+ghsas:
+  - GHSA-jp32-vmm6-3vf5
+credit: liggitt (Jordan Liggitt)
+links:
+    pr: https://github.com/kubernetes/kubernetes/pull/16381
+    commit: https://github.com/kubernetes/kubernetes/commit/37f730f68c7f06e060f90714439bfb0dbb2df5e7
+    context:
+      - https://github.com/advisories/GHSA-jp32-vmm6-3vf5