CVE-2014-5019 on Ubuntu 12.04 LTS (precise) - medium.
Description:
The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of service via a crafted HTTP Host header, related to determining which configuration file to use.