CVE-2022-35737
HighAdvisory
Published 3 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.215
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 473
- of 17,781 indexed, latest versions
- Container images
- 413
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
`libsqlite3-sys` via C SQLite improperly validates array index
Carried by container images the latest versions of 473 of 17,781 indexed charts deploy, on 413 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more | 3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more | 291 |
| libsqlite3-syscargo | 0.23.2 | 0.25.1 | 1 |
| sqliterpm | 3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more | 0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1 | 119 |
| sqlite3rpm | 3.28.0-lp151.2.3.1 | 3.39.2-1.1 | 2 |
- OSV records
- GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
- Also known as
- BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2
Charts affected
473 by stars
Container images carrying it
413 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| linuxserver/ | 2fbb21fb4903 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| linuxserver/ | 4a13ced2326c | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| litmuschaos/ | 99961210d467 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| longhornio/ | dca34321452c | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| longhornio/ | ede61fe2a472 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| lsstsqre/ | b75bf8aaafa4 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| lumenvox/ | 53decadc102d | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| mediagis/ | c15e941485ef | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| minio/ | 55f3aef5803e | sqlite | 0:3.26.0-17.el8_7 | 1 |
| minio/ | 2a374c124d44 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| minio/ | 4b415310d8d0 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| minio/ | 1484c87239ea | sqlite | 0:3.26.0-17.el8_7 | 1 |
| minio/ | f9576903f19d | sqlite | 0:3.26.0-17.el8_7 | 1 |
| minio/ | fc6bedc99355 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| minio/ | 2adc5be088f5 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| mintproject/ | 83aade2c1855 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| muluder/ | 43b597a93da7 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| netboxcommunity/ | 3d652dca5351 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| nvidia/ | 91b20b66d1cd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| nvidia/ | 964847cc3fd8 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| omecproject/ | 28a90cc26716 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| omecproject/ | b4ae7d0d6b74 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| omecproject/ | bcc5f19fd676 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| omecproject/ | 5715e5648aa0 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| omecproject/ | d109a8e57e71 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| onosproject/ | 44914a8d4b3f | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| opendatacube/ | 5d810e8504b8 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| opendatacube/ | 91870111837c | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| opendatacube/ | 1b90cdf68831 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| openelevation/ | 82fb21612e86 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| openkm/ | 3bc465a7461b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| openwhisk/ | c80dba0de3aa | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| opsmx11/ | 5c50ca123d88 | sqlite3 | 3.8.2-1ubuntu2.2+esm3 | 1 |
| oxfordsemantic/ | db17910eb855 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| oxfordsemantic/ | baf570ff968d | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| percona/ | 1f978ab8912e | sqlite | 0:3.26.0-17.el8_7 | 1 |
| photoprism/ | 2954334adbda | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| plexinc/ | 46ea59b96f2b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| plexinc/ | b598abb134ad | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| pnnlmiscscripts/ | 155131891741 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| pozetroninc/ | 53ae64f29da8 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| project2team4/ | 3ff031a08887 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ptthanh1511/ | 5741cbde85ab | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| puppet/ | 0b6fd9a6b7da | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| radondb/ | 4732df471073 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| rancher/ | e66f32d19eb9 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| resouer/ | e2f198b49ba7 | sqlite3 | 3.8.2-1ubuntu2.2+esm3 | 1 |
| rm3l/ | 62d1cc4223e5 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| robotshop/ | 119b545823cd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| rundeck/ | 4d64fe56f767 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |