CVE-2022-35737
HighAdvisory
Published 3 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.215
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 473
- of 17,781 indexed, latest versions
- Container images
- 413
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
`libsqlite3-sys` via C SQLite improperly validates array index
Carried by container images the latest versions of 473 of 17,781 indexed charts deploy, on 413 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more | 3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more | 291 |
| libsqlite3-syscargo | 0.23.2 | 0.25.1 | 1 |
| sqliterpm | 3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more | 0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1 | 119 |
| sqlite3rpm | 3.28.0-lp151.2.3.1 | 3.39.2-1.1 | 2 |
- OSV records
- GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
- Also known as
- BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2
Charts affected
473 by stars
Container images carrying it
413 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| datawire/ | f95ae710d75c | sqlite | 0:3.26.0-17.el8_7 | 1 |
| deepflowce/ | bc1882f75c18 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| dellcloud/ | 02fc234353a9 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| dellcloud/ | 4d2eb25b9225 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| dellemc/ | 148ada9060a9 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| dellemc/ | 660cabd6d929 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| dgraziotin/ | 38f2de42bed0 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| dniel/ | 45a667852f2a | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| elastic/ | c7a1c63257d0 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| elastictranscoder/ | 963ab3858c6b | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| elastictranscoder/ | 26208b8c2359 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| elastictranscoder/ | b4a0327029e6 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| elastictranscoder/ | 5b75d19e2733 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| empathyco/ | 03e724e41eeb | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| engrmth/ | 6d8464e6f0e8 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ethereumex/ | a7603aa8df4c | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| fiware/ | 92a3c5cf43c0 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| fiware/ | efc6793388cc | sqlite | 0:3.26.0-17.el8_7 | 1 |
| foldingathome/ | 5ef7742d1eb4 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| frankescobar/ | 8a4d7e9308de | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| frankescobar/ | cafa03b94dac | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| free5gmano/ | 36f806935519 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| galaxy/ | e5c265fe9fcd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| galaxy/ | 0267bad550e6 | sqlite3 | 3.8.2-1ubuntu2.2+esm3 | 1 |
| galaxy/ | 8e577a626dfd | sqlite3 | 3.8.2-1ubuntu2.2+esm3 | 1 |
| geoscienceaustralia/ | f4039b45572a | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| geoservercloud/ | ca58b74529cd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| geoservercloud/ | 5dc0c93a1710 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| geoservercloud/ | 8c70ee06d5ab | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| geoservercloud/ | 42775ba6a4da | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| gethue/ | 5702b2c37ff9 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| gitlab/ | 860d4a3fec7a | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| gotson/ | 9b15ea6bfc30 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| haugene/ | 059216cfae4b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| haveagitgat/ | 1256348872ce | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| haveagitgat/ | 1e3f9328327d | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| housewrecker/ | f417dd0a7547 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| huginn/ | c794eddc7b47 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| hugohg34/ | 812a03b3f274 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| hyperledger/ | c65891b6c237 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| ibmcom/ | c796a4c693b4 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ibmcom/ | 9c73804b37a3 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ibmcom/ | d28bf361327a | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ibmcom/ | 7e4dc1e27cdf | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| ibmcom/ | b5d8c6714dbc | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| ibmcom/ | e17bdccc5030 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| ibmcom/ | cd5065df7304 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ibmcom/ | 395e60cc6e3d | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |