cve 2024 32884

CVE-2024-32884 is a disclosed vulnerability in the gix-transport Rust crate, which is part of the gitoxide library family used for Git operations. The flaw involves a weakness in how the crate handles transport URL parsing and hands off control to an external SSH program. Microsoft's Azure Linux includes this open-source library and is therefore potentially affected, but the company's attestation does not guarantee that no other Microsoft product contains the vulnerable crate. Defenders should treat unattested Microsoft artifacts as not yet checked rather than not affected. This tag covers discussions about verifying the impact of CVE-2024-32884 across Microsoft products and the broader open-source ecosystem.