Launchpad.net

CVE 2016-7797

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

See the CVE page on Mitre.org for more details.