CVE-2022-35737
HighAdvisory
Published 3 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.215
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 473
- of 17,787 indexed, latest versions
- Container images
- 413
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
`libsqlite3-sys` via C SQLite improperly validates array index
Carried by container images the latest versions of 473 of 17,787 indexed charts deploy, on 413 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more | 3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more | 291 |
| libsqlite3-syscargo | 0.23.2 | 0.25.1 | 1 |
| sqliterpm | 3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more | 0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1 | 119 |
| sqlite3rpm | 3.28.0-lp151.2.3.1 | 3.39.2-1.1 | 2 |
- OSV records
- GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
- Also known as
- BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2
Charts affected
473 by stars
Container images carrying it
413 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| rundeck/ | b13e8059ad72 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| sarwansharma/ | 59d1da9385d1 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| scrapinghub/ | a5f89bc84606 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| scsibug/ | 03f54bfbffff | libsqlite3-sys | 0.25.1 | 1 |
| seafileltd/ | 6693911bcc40 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| seafileltd/ | 7ac833196f60 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| seafileltd/ | ed0fcda5e6a9 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| seldonio/ | 1d0da98a2d76 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| seldonio/ | 4e985d2006a8 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| shenxn/ | acf31af7c111 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| sigma2as/ | c284ead9ec3e | sqlite | 0:3.26.0-17.el8_7 | 1 |
| sismics/ | f4b0ef019cf1 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| slagattollas/ | 68e7f56393fc | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| snipe/ | 55fb7636a98c | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| someblackmagic/ | 6eca64b6b440 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| splunk/ | c4e0d3146226 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| stakater/ | 97bf456cc97c | sqlite | 0:3.26.0-17.el8_7 | 1 |
| stashapp/ | 24dbd7607174 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| statcan/ | 3921305425b8 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| streamnative/ | 11bceacec8fb | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| tensorflow/ | 1e3172090703 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| timescale/ | ed719c0cd19d | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| timothyclarke/ | 22c41e5ca7e2 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| tpdock/ | 3da600c95a49 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| viniciusfcf/ | bba8ee1b5cd5 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| voltha/ | c4e41e92f046 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| voltha/ | 59ab2a00f712 | sqlite3 | 3.8.2-1ubuntu2.2+esm3 | 1 |
| voltha/ | 37f80524c207 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| voltha/ | 9ee8c1f4428c | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| voltha/ | e038acb950d3 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| voltha/ | 655c3048a602 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| voltha/ | ff596b62de59 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| wavefronthq/ | d1064d28f6eb | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| woojoong/ | ec230db19652 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| xeladock/ | 4baf531453f1 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| yandex/ | 863f94a0f607 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| yandex/ | 1cbf75aabe1e | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| yandex/ | 4eccfffb01d7 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| yandex/ | ab1738a64b70 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| yandex/ | ccf9c2b5e3f2 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| yandex/ | d210dc69321e | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| zabbix/ | 2127168cab03 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| zabbix/ | 6c946b1f45cd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| zabbix/ | 01de79c31391 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| zabbix/ | 99e9a090b516 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| zabbix/ | ee4baa872280 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| gcr.io/ | 809338a69bd5 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| gcr.io/ | 10f4dbc8eeeb | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| gcr.io/ | cb5c1bddd1b5 | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| gcr.io/ | 5ea7b7f3632a | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |