K17172 : OpenJDK vulnerability CVE-2015-2638

Security Advisory Description

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. (CVE-2015-2638)

Impact

Confidentiality is affected when exploited by a locally authenticated attacker. However, affected F5 products that contain the vulnerable software component do not use them in a way that exposes this vulnerability.