sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
NVD-CWE-Other