A vulnerability was found in the way RemoteMessageChannel introduced in jboss-remoting versions 3.3.10 reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.