The issue allows remote attackers to cause a denial of service by establishing a bisocket control connection TCP session and then not sending any application data. This is due to the `org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run` method in JBoss Remoting.