Hacker News new | ask | show | jobs
by buildzr 2583 days ago
There's actually been a few vulnerabilities in the OpenSSH client when connecting to untrusted servers.

These come to mind:

https://www.cvedetails.com/cve/CVE-2019-6111/

https://www.cvedetails.com/cve/CVE-2016-0778/

Generally speaking though you're correct though - keep your client up to date and you'll be protected from a hacked server.

Clients are in general expose much larger attack surfaces in many cases, so likely will have more frequent and significant security patches. There's a lot more to attack in a web browser than in say, Nginx.