CVE-2022-35737
HighAdvisory
Published 3 Aug 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.215
- 97th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 473
- of 17,781 indexed, latest versions
- Container images
- 413
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
`libsqlite3-sys` via C SQLite improperly validates array index
Carried by container images the latest versions of 473 of 17,781 indexed charts deploy, on 413 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite3deb | 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.11.0-1ubuntu1+15 more | 3.8.2-1ubuntu2.2+esm3, 3.11.0-1ubuntu1.5+esm2, 3.22.0-1ubuntu0.7, 3.31.1-4ubuntu0.5+1 more | 291 |
| libsqlite3-syscargo | 0.23.2 | 0.25.1 | 1 |
| sqliterpm | 3.26.0-3.el8, 3.26.0-4.el8_1, 3.26.0-6.el8, 3.26.0-11.el8+5 more | 0:3.26.0-17.el8_7, 0:3.34.1-6.el9_1 | 119 |
| sqlite3rpm | 3.28.0-lp151.2.3.1 | 3.39.2-1.1 | 2 |
- OSV records
- GHSA-jw36-hf63-69r9UBUNTU-CVE-2022-35737RHSA-2023:0110RHSA-2023:0339openSUSE-SU-2024:12210-1
- Also known as
- BIT-sqlite-2022-35737, RUSTSEC-2022-0090, USN-5712-1, USN-5716-1, USN-5716-2
Charts affected
473 by stars
Container images carrying it
413 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | c2d6e775db5a | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 0eb230e2381a | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| ghcr.io/ | 4ea617c30397 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 6011182e3946 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 448045c4270b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 292b3614670f | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 24efef013a53 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | e28e0e7de11b | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 01563adc95fd | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 2b92df1143b9 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 600221f0f43f | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | a85e03d8bc1d | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | baa4fa9549dc | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| ghcr.io/ | 4c1b67cf39af | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| ghcr.io/ | 605b6d544028 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| ghcr.io/ | ff2af53897e7 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 8368359c8dd0 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| ghcr.io/ | 8e6a9516eac0 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| mcr.microsoft.com/ | 49a57dc220b1 | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| public.ecr.aws/ | efcecf98b912 | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| public.ecr.aws/ | 573779e57fae | sqlite3 | 3.31.1-4ubuntu0.5 | 1 |
| quay.io/ | 5b6701d8fb31 | sqlite3 | 3.37.2-2ubuntu0.1 | 1 |
| quay.io/ | cdefc81c6b2e | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 10df27bc5560 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | a3b9a07648b6 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | a2d3a4c67b0f | sqlite3 | 3.22.0-1ubuntu0.7 | 1 |
| quay.io/ | 55330b1b60c1 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | bb40472e4ff5 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 0dc38a87b844 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | ea838e5b4051 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | a8a9ec461034 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | ce6938ff6709 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | e6d7afb1a4bf | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | fce990dece01 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 3590af73f65a | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 9912fdf6c183 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 24352dca6672 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 35d87a381432 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 7a4b9fedc724 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 3029dc0f1d38 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 8830f76112b6 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 09d52508fee9 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 15fa0ed662b1 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 36ce77526145 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | b1710745fa64 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | e383ba3e0966 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | c2851757eca4 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 50ee58bc9770 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | 546a8b52d7b0 | sqlite | 0:3.26.0-17.el8_7 | 1 |
| quay.io/ | c3d20bc2ea08 | sqlite | 0:3.26.0-17.el8_7 | 1 |