It was found that omapi code doesn't free socket descriptor if empty message was sent by client, which allows malicious client to use up all available descriptors causing Denial of Service https://nvd.nist.gov/vuln/detail/CVE-2017-3144