CVE-2014-5019 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of service via a crafted HTTP Host header, related to determining which configuration file to use.