java is vulnerable to denial of service (DoS). The vulnerability exists through supplying data to APIs in the Security component without using sandboxed Java Web Start applications, or sandboxed Java applets.
h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
marc.info/?l=bugtraq&m=142496355704097&w=2
marc.info/?l=bugtraq&m=142607790919348&w=2
rhn.redhat.com/errata/RHSA-2015-0068.html
rhn.redhat.com/errata/RHSA-2015-0079.html
rhn.redhat.com/errata/RHSA-2015-0080.html
rhn.redhat.com/errata/RHSA-2015-0085.html
rhn.redhat.com/errata/RHSA-2015-0086.html
rhn.redhat.com/errata/RHSA-2015-0136.html
rhn.redhat.com/errata/RHSA-2015-0264.html
www.debian.org/security/2015/dsa-3144
www.debian.org/security/2015/dsa-3147
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
www.securityfocus.com/bid/72165
www.securitytracker.com/id/1031580
www.ubuntu.com/usn/USN-2486-1
www.ubuntu.com/usn/USN-2487-1
www.vmware.com/security/advisories/VMSA-2015-0003.html
access.redhat.com/security/updates/classification/#critical
bugzilla.redhat.com/show_bug.cgi?id=1152789#c82
exchange.xforce.ibmcloud.com/vulnerabilities/100151
kc.mcafee.com/corporate/index?page=content&id=SB10104
rhn.redhat.com/errata/RHSA-2015-0067.html
security.gentoo.org/glsa/201507-14
source.android.com/security/bulletin/2016-11-01.html
www-304.ibm.com/support/docview.wss?uid=swg21695474