CVE-2022-35737
HighAdvisory
Published 3 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.215
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 473
- of 17,787 indexed, latest versions
- Container images
- 413
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
`libsqlite3-sys` via C SQLite improperly validates array index
Carried by container images the latest versions of 473 of 17,787 indexed charts deploy, on 413 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more | 3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more | 291 |
| libsqlite3-syscargo | 0.23.2 | 0.25.1 | 1 |
| sqliterpm | 3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more | 0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1 | 119 |
| sqlite3rpm | 3.28.0-lp151.2.3.1 | 3.39.2-1.1 | 2 |
- OSV records
- GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
- Also known as
- BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2
Charts affected
473 by stars
Container images carrying it
413 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| intel/ | aa8f5483a2ef | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| intel/ | 1a89327e499b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| iofog/ | 7260cf861479 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| iosifache/ | 85df3f04b5da | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ironmansoftware/ | 1943c73cce31 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| istio/ | b8f16a765eea | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| istio/ | 72f25a55f078 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| istio/ | 8f92fc1b6592 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| istio/ | 2232f365aed6 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| istio/ | 268ab879ea51 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| istio/ | 655eefa11c84 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| istio/ | 6cfce8a071b9 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| istio/ | 294ca55bd1cc | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| istio/ | c09319753454 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| istio/ | e7e110a421c2 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| istio/ | 0c78be035e98 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| istio/ | 87a9db561d2e | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| istio/ | 88c6c693e67a | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| istio/ | df69c1a7af7c | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| jacobalberty/ | 4a3616625dda | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| jacobalberty/ | c409924e2463 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| jakowenko/ | b858bac9e32a | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| jedi132000/ | dc2a81e92f23 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| jmferrer/ | 030f68ec6998 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| jupyterhub/ | e4770285aaf7 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| jupyterhub/ | e3e6f3051df8 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| kennethreitz/ | 599fe5e50731 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| kubeoperator/ | be8f0d624640 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| library/ | b095ff3248c6 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 332c6d416808 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 2461f02672b3 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| library/ | e2e2031c15be | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 07e06f2e7ae9 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 490f01279be1 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 05678ae4e5e1 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 3d0e6df9fd5b | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| library/ | 6ca49afbcb2b | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| library/ | 71a63fc2438e | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| library/ | 9cb28f7291d9 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| library/ | b6dd45cc35b3 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| lightbend/ | b0c9894ac8dd | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| linuxserver/ | a847b5b2d860 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| linuxserver/ | 938810eca3d3 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| linuxserver/ | 45c5fe102ff3 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| linuxserver/ | b801bbcf6386 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| linuxserver/ | 0ac871624394 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| linuxserver/ | 2ce561a95e7b | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| linuxserver/ | 2427dde159a2 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| linuxserver/ | f93d2560e233 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |