Comment by cowlevel

What specific configuration would you recommend to block the vulnerability without actually patching it?