SSH protocol limitations

SSH is capable of circumventing many network-related security threats. However, it is vulnerable to denial-of-service attacks, inheriting the weaknesses of TCP/IP on which it is based.

While the TCP/IP protocol is resistant to problems of congestion and IP link breaks, it was not designed to withstand attacks involving the injection of false packets into the network. SSH, on the other hand, provides no protection against attacks that break the establishment of TCP connections. On the other hand, the encryption and authentication mechanisms in this protocol are effective against attacks that hijack or alter TCP/IP data, because SSH detects them, but they will also break its session. In the following, we'll look at the main disadvantages of SSH.