jq Integer Overflow Vulnerability in jv_array_set Function Allowing Denial-of-Service

A signed integer overflow vulnerability has been identified in jq, a command-line JSON processor, in versions through 1.7.1. The issue arises when an index value of 2147483647, the maximum for signed integers, is used to assign a value in an array. This overflow leads to a segmentation fault, causing a denial-of-service condition. The vulnerability has been patched in commit de21386681c0df0104a99d9d09db23a9b2a78b1e.

Impact

Exploitation of this vulnerability causes a segmentation fault, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by using jq version 1.7.1 and running a command that assigns a value using the index 2147483647. This can be done with the command 'jq -n '.[2147483647]=1'', which triggers the integer overflow and causes jq to crash with a segmentation fault.

Remediation

Users can upgrade to jq version 1.8.0 or later, where this vulnerability has been fixed.