CVE-2022-35737
HighAdvisory
Published 3 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.215
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 473
- of 17,781 indexed, latest versions
- Container images
- 413
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
`libsqlite3-sys` via C SQLite improperly validates array index
Carried by container images the latest versions of 473 of 17,781 indexed charts deploy, on 413 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more | 3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more | 291 |
| libsqlite3-syscargo | 0.23.2 | 0.25.1 | 1 |
| sqliterpm | 3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more | 0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1 | 119 |
| sqlite3rpm | 3.28.0-lp151.2.3.1 | 3.39.2-1.1 | 2 |
- OSV records
- GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
- Also known as
- BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2
Charts affected
473 by stars
Container images carrying it
413 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gcr.io/ | c552478f8f11 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| gcr.io/ | 8f9ff98fdbef | sqlite3 | 3.11.0-1ubuntu1.5+esm2 | 1 |
| gcr.io/ | 9538fabe49fd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 61a9bb81b85c | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 0cf25ed621e2 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 0635f17c9d2c | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | e34964e336c1 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 0c5a3398d1e4 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 8ba040e79ca0 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | aa45adaf59a7 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 857b137fc7b3 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 44790b71aa22 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 6dce3158b851 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 25d229ae5bde | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 558972f9374c | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 57072c72a7cd | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 200aea1a2b42 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | f4a5bfc06a74 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | fbf0738cfc7e | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | e2e812a4cf8e | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | b612c18479e0 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | e2d927639f6e | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 32c6d2f5eab9 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 7ac2adb6ca49 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 1a958edafdb1 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | c6bb121ced90 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 6ba7e1608286 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 5253fbf8d04c | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 7dd5ac80c8f1 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | adebc40ddf98 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | 372dcd370945 | sqlite | 0:3.34.1-6.el9_1 | 1 |
| ghcr.io/ | bcd5b8d4c45c | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| ghcr.io/ | 923a3f704b21 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 3fbe4c29d14c | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 8caf5289fe73 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| ghcr.io/ | 6047599cd78e | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | c9bd82dc5fda | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | fdb5501cdfb9 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 827aa2f2389d | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 3a4715b46aa2 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 54ebc1f90963 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | cbd5d4cc1245 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | e5571acd10ce | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| ghcr.io/ | ef3670f7e0a8 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | ef756c7d784b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | c863aa9875fa | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 61deadd1ec78 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 4273dfaf0295 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| ghcr.io/ | ad943e9309e4 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |