Apache - Memory Corruption (CVE-2020-9490)

Apache server is affected by a memory corruption vulnerability. A specially crafted value for the Cache-Digest header in a HTTP/2 request would result in a crash when the server actually tries to HTTP PUSH a resource afterwards.

The risk exists that a remote unauthenticated attacker can disable, shut down or disrupt the Apache server.

Configure the HTTP/2 feature via "H2Push off" to mitigate this vulnerability. Also, upgrade the Apache server to the latest version.

https://nvd.nist.gov/vuln/detail/CVE-2020-9490

https://httpd.apache.org/security/vulnerabilities_24.html