A flaw was found in rsync. A malicious rsync server can exploit an out-of-bounds read vulnerability in the `recv_files()` function. By manipulating compatibility flags and transfer records, the server can cause a connecting client to attempt to read memory outside of allocated bounds. This can lead to a segmentation fault, resulting in a denial of service for the client.