GDM 2.4.4.x before 2.4.4.4 and 2.4.1.x before 2.4.1.7 does not limit the number or duration of commands and uses a blocking socket connection which allows attackers to cause a denial of service (resource exhaustion) by sending commands and not reading the results.