{
  "id": "openEuler-SA-2024-1181",
  "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1181",
  "title": "An update for containerd is now available for openEuler-22.03-LTS",
  "severity": "High",
  "description": "containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability.  It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.\r\n\r\nSecurity Fix(es):\r\n\r\nA maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)",
  "cves": [
    {
      "id": "CVE-2022-41723",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41723",
      "severity": "High"
    }
  ]
}